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THE  USA  PATRIOT  ACT: 
IMPLICATIONS  FOR  LAWFUL  INTERCEPTION 


Introduction 

Promptly  after  1 1 September  2001,  the  US  Congress  and  President  signed  into  law  the 
“Uniting  and  Strengthening  America  by  Providing  Appropriate  Tools  Required  to  Inter- 
cept and  Obstruct  Terrorism”  Act  (USA  Patriot  Act  or  “the  Act”)  of  2001.  Among  the 
many  issues  addressed  in  this  Act,  several  provisions  were  introduced  to  facilitate  elec- 
tronic surveillance  by  law  enforcement  and  the  FBI,  mainly  through  lawful  interception, 
of  suspected  agents  of  foreign  entities  or  individuals  assisting  such  agents. 

In  view  of  the  considerable  amount  of  controversy  and  confusion  concerning  the  US  Pa- 
triot Act  as  it  relates  to  lawful  interception  (LI),  this  document  attempts  to  summarize  and 
clarify  the  Act’s  sections  that  pertain  to  electronic  surveillance.  Most  of  these  sections 
were  considered  as  sunset  (temporary)  provisions  that  were  due  to  expire  on  3 1 Decem- 
ber 2005.  The  Act  was  temporarily  extended  two  times  during  the  months  that  followed 
while  Congress  debated  the  substance  and  wording  of  the  sunset  provisions  and  matters 
pertaining  to  how  the  Act  should  handle  the  privacy  issues  and  the  rights  of  suspects. 
President  George  W.  Bush  finally  signed  a version  of  the  Act  into  law  on  9 March  2006. 

Commentaries  in  this  document  are  restricted  to  the  Act’s  technical  and  procedural  impli- 
cations involving  lawful  interception.  Note  many  of  the  provisions  of  the  USA  Patriot 
Act  are  essentially  mark-ups  to  existing  US  law,  notably  the  Foreign  Intelligence  Surveil- 
lance Act  (FISA)  of  1978  (Title  50,  Chapter  36)  and  US  Code  18  (Crimes  and  Criminal 
Procedure).  Title  II  “Enhanced  Surveillance  Procedures”  of  the  original  USA  Patriot  Act 
focuses  on  electronic  surveillance  measures,  and  is  the  focus  of  this  document. 


Note:  in  the  following  pages  [S]  refers  to  sections  of  the  original  USA  Patriot  Act  that  were  originally  set  to 
expire  on  3 1 December  2005,  according  to  the  “Sunset  Provision”  of  Sec.  224  of  the  original  USA  Patriot 
Act;  these  sections  have  been  made  permanent  by  the  9 March  2006  law.  Those  sections  originally  not 
subject  to  this  sunset  provision  are  marked  with  [nS];  these  sections  remain  permanent.  Sections  with  ex- 
tended sunset  provisions  are  indicated  in  the  text. 
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Detail  of  Section  II  of  USA  Patriot  Act 


Sec.  201:  AUTHORITY  TO  INTERCEPT  WIRE,  ORAL,  AND  ELECTRONIC 
COMMUNICATIONS  RELATING  TO  TERRORISM 

This  section  amends  Title  18  of  the  US  Code  with  a list  of  additional  offenses  that  can  be 
used  to  authorize  a federal  wiretap.  The  list  now  includes  the  use  or  development  of 
chemical  weapons,  crimes  of  violence  against  Americans  overseas,  development  of 
weapons  of  mass  destruction,  multinational  terrorism,  financing  transactions  with  a coun- 
try designated  as  a sponsor  of  terrorism,  and  providing  material  support  to  terrorists  or 
terror  organizations.  The  implication  here  is  clearly  more  reasons  for  the  authorization 
of  wiretaps,  all  other  causes  held  unchanged.  [S] 


Sec.  202:  AUTHORITY  TO  INTERCEPT  WIRE,  ORAL,  AND  ELECTRONIC 
COMMUNICATIONS  RELATING  TO  COMPUTER  FRAUD  AND  ABUSE  OF- 
FENSES. 

Augments  Title  18  by  including  computer  crimes  to  the  list  of  mail-fraud  related  offenses 
that  justify  a federal  wiretap.  This  section  reflects  the  need  for  investigation  of  not  only 
network  and  computer  hacking  by  terrorists,  but  also  rampant  identity  theft  and  com- 
puter-based child  pornography.  The  implication  here  is  not  only  an  increase  in  the  num- 
ber of  offenses  that  could  lead  to  authorized  wiretaps,  but  also  a change  in  the  nature  of 
the  interception  - namely  towards  email,  Web,  and  other  Internet-based  crimes.  [S] 


Sec.  203:  AUTHORITY  TO  SHARE  CRIMINAL  INVESTIGATIVE  INFORMA- 
TION. 

This  section  declares  that  following  proper  procedures,  information  pertaining  to  a crimi- 
nal investigation  may  be  exchanged  between  grand  juries,  law  enforcement,  and  federal 
investigative  bodies.  With  regard  to  electronic  surveillance,  Sec.  203(b)  permits  infor- 
mation obtained  from  lawful  interception  to  be  shared  among  law  enforcement  and  vari- 
ous federal  agencies,  including  that  from  defense  and  intelligence  operations.  Sec. 

203(d)  opens  sharing  to  foreign  intelligence  information.  Any  such  sharing  of  informa- 
tion among  different  government  entities  will  require  the  systematic  organization  of  sur- 
veillance data,  especially  as  mixed  forms  of  communications  are  now  to  be  presented  and 
exchanged  among  multiple  investigative  bodies  (instead  of  only  one).  Secure  storage 
and  transmission  of  data  needs  to  be  assured,  particularly  in  the  handling  of  the  identi- 
ties of  suspects  and  their  intentions.  [S] 


Sec.  206:  ROVING  SURVEILLANCE  AUTHORITY  UNDER  THE  FOREIGN  IN- 
TELLIGENCE SURVEILLANCE  ACT  OF  1978. 

This  section  concerns  “roving  wiretaps”  (or  multipoint  taps)  in  foreign  intelligence  inves- 
tigations and  is  derived  from  FISA.  Roving  wiretaps  enable,  through  a single  court  order, 
a target  to  be  investigated  over  more  than  one  location,  or  more  than  one  type  of  commu- 
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nications  medium.  Here  the  target  must  be  a foreign  person  or  agent  to  a foreign  power 
operating  on  US  soil.  This  measure  has  profound  impact  on  lawful  interception  proc- 
esses in  that  it  can  expand  the  scope  of  the  surveillance  beyond  a single  communications 
identity  (e.g.,  phone  number  under  surveillance)  to  multiple  communications  identities 
associated  with  the  target,  e.g.,  multiple  fixed  line  and  mobile  phone  numbers,  email  ad- 
dresses, etc.  Amendments  to  this  section  allow  for  expanded  targeting  of  the  surveil- 
lance, even  when  the  suspected  individuals  or  their  locations  cannot  yet  be  specified  but 
the  targets  can  be  indirectly  specified  by  phone  numbers,  Internet  addresses,  etc.  Fur- 
thermore, such  identifiers  of  target  traffic  need  not  be  permanently  assigned  to  the  target 
identity  (e.g.,  IP  addresses  are  often  temporary,  whereas  phone  numbers  are  more  perma- 
nent). On  the  other  hand,  an  amendment  to  this  section  does  impose  a time  limit  (up  to 
60  days)  on  how  long  the  roving  procedures  take  place  to  track  down  the  target,  and  the 
locations  and  services  engaged  in  the  investigation  must  also  be  documented  by  the  in- 
vestigating party.  This  section  also  states  that  if  a target  attempts  to  interfere  with  an  in- 
vestigation by  thwarting  the  surveillance  and  identities  of  individuals,  the  communica- 
tions carrier  (as  well  as  other  parties)  are  then  authorized  to  make  as  much  of  their  facili- 
ties available  as  needed  to  support  the  surveillance.  [Extended  Sunset  Provision  - Ex- 
pires 3 1 December  2009] 


Sec.  207:  DURATION  OF  FISA  SURVEILLANCE  OL  NON-UNITED  STATES 
PERSONS  WHO  ARE  AGENTS  OF  A FOREIGN  POWER. 

Surveillance  under  FISA  had  been  limited  to  90  days,  but  the  amendment  extends  this 
limit  to  one  year.  [S] 


Sec.  209:  SEIZURE  OF  VOICE-MAIL  MESSAGES  PURSUANT  TO  WAR- 
RANTS. 

This  essentially  clarifies  Title  18  (Sec  2703),  stating  that  that  law  enforcement  only  needs 
a simple  search  warrant  to  seize  a voice  mail  message,  not  a wiretap  order  which  until 
now  has  been  required  for  obtaining  copies  of  voice  mail  from  carrier  and  third-party 
voice  mail  services.  Therefore,  acquisition  of  stored  messages  may  not  require  the  so- 
phisticated practices  and  procedures  of  lawful  interception  methods  even  if  the  messages 
are  stored  at  telephone  operator  facilities.  Nevertheless,  LI  technologies  and  systems 
could  certainly  play  a role  in  securely  delivering  the  messages  to  law  enforcemen  t and 
the  courts.  Likewise,  LI  would  continue  to  play  a role  in  real-time  surveillance  which  re- 
quires the  capture  of  messages  as  they  are  recorded  and/or  transmitted.  [S] 

Sec.  210:  SCOPE  OF  SUBPOENAS  FOR  RECORDS  OF  ELECTRONIC 
COMMUNICATIONS. 

This  section  extends  identifiers  of  the  target  and  other  gathered  surveillance  information 
to  include: 

• Name; 

• Address; 
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• Local  and  long  distance  telephone  connection  records,  or  records  of  session  times 
and  durations; 

• Length  of  service  (including  start  date)  and  types  of  services  utilized; 

• Telephone  or  instrument  number  or  other  subscriber  number  or  identity,  including 
any  temporarily  assigned  network  address  (e.g.,  IP  address); 

• Means  and  source  of  payment  for  such  service  (including  any  credit  card  or  bank 
account  number)  of  a subscriber. 

Sec.  212:  EMERGENCY  DISCLOSURE  OF  ELECTRONIC  COMMUNICA- 
TIONS TO  PROTECT  LIFE  AND  LIMB. 

Permits  communications  service  providers  to  voluntarily  disclose  stored  communications 
messages  to  law  enforcement  if  the  service  provider  believes  the  message  implies  danger 
of  death  or  severe  physical  injury.  Until  this  provision,  law  enforcement  was  not  permit- 
ted to  readily  accept  such  notification.  Amendments  to  this  section  also  call  for  enhanced 
Congressional  oversight  of  such  voluntary  disclosures  through  regular  reports  of  such 
activities  to  be  prepared  by  the  US  Attorney  General.  LI  methods  and  systems  could  ap- 
ply here  for  the  secure  delivery  of  the  messages  to  law  enforcement.  Note  this  Section  ap- 
plies to  the  variety  of  public  voice  and  data  services  now  in  use,  including  Internet.  [S] 


Sec.  214:  PEN  REGISTER  AND  TRAP  AND  TRACE  AUTHORITY  UNDER  FISA 
/ FACTUAL  BASIS  FOR  PEN  REGISTER  AND  TRAP  AND  TRACE  AUTHOR- 
ITY UNDER  FISA. 

This  section  is  a FISA  modification  that  simplifies  the  procedure  for  an  investigator’s  re- 
questing of  pen  register  and  trap  and  trace  taps,  while  emphasizing  that  the  need  for  the 
surveillance  must  be  related  to  actions  connected  to  acts  of  terrorism,  clandestine  opera- 
tions, and  other  requirements  under  FISA.  Amendments  to  the  US  PATRIOT  Act  call  for 
more  mandatory  disclosure  by  the  telecommunications  supplier  of  information  pertaining 
to  the  target,  such  as  the  types  of  services  supplied  to  the  target,  phone  numbers  and  IP 
addresses  used  by  the  target,  how  the  target  pays  for  the  services  (including  release  of 
target  credit  card  or  bank  account  numbers),  how  long  the  target  has  been  a customer  of 
the  supplier,  and  patterns  of  usage  by  the  target  in  using  the  supplier’s  services.  Again,  it 
is  emphasized  that  this  information  pertains  only  to  suspected  targets  that  are  of  a foreign 
nationality  or  are  an  agent  of  a foreign  power  and  operating  on  US  soil.  [S] 


Sec.  215:  ACCESS  TO  RECORDS  AND  OTHER  ITEMS  UNDER  THE  FOREIGN 
INTELLIGENCE  SURVEILLANCE  ACT  / PROTECTIONS  FOR  COURT  OR- 
DERS TO  PRODUCE  RECORDS  AND  OTHER  ITEMS  IN  INTELLIGENCE  IN- 
VESTIGATIONS. 

Covers  FBI  orders  for  the  production  of  any  “tangible  things”  (including  books,  records, 
papers,  documents,  and  other  items)  for  an  investigation  to  protect  against  international 
terrorism  or  clandestine  intelligence  activities.  This  section  has  been  a considerable 
source  of  controversy  because  it  expanded  record  collection  to  include  library  circulation 
records,  library  patron  lists,  book  sales  records,  book  customer  lists,  firearms  sales  re- 
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cords,  and  medical  records  - subject  to  collection  approval  by  the  FBI  Director  or  Deputy 
Director.  Any  unauthorized  disclosure  to  third  parties  by  librarians,  sales  agents,  and 
other  personnel  assisting  the  FBI  in  such  an  investigation  would  constitute  a crime.  On 
the  other  hand,  the  amendment  also  calls  for  more  intensive  Congressional  oversight  of 
any  such  practices  by  the  FBI.  To  lessen  the  severity  of  the  law,  HR3 199  narrowed  down 
the  conditions  under  which  the  information  covered  under  this  section  may  be  obtained, 
explicitly  stating  that  any  such  collection  has  to  be  in  the  context  of  an  investigation  in- 
volving a foreign  power  or  agent.  Furthermore,  HR3 199  enables  any  search  order  under 
this  section  to  be  challenged  by  the  target  of  the  search  by  submitting  a petition  to  a des- 
ignated pool  of  judges  prescribed  in  FISA  (see  also  the  brief  discussion  on  the  Additional 
Re  authorization  Amendments  below). 

Despite  the  broad  scope  of  this  act,  the  implications  for  LI  are  not  clear.  In  theory,  it  is 
conceivable  that  user  records  associated  with  this  act  can  reside  on  Web  servers  and  that 
transactions  could  be  recorded  through  e-commerce  Web  senders  and  emails.  In  such 
cases,  real  time  collection  of  data  from  Web  and  email  interactions  with  a suspect  could 
therefore  fall  under  this  amendment.  [Extended  Sunset  Provision  - Expires  3 1 December 
2009] 

Sec.  216:  MODIFICATION  OF  AUTHORITIES  RELATING  TO  USE  OF  PEN 
REGISTERS  AND  TRAP  AND  TRACE  DEVICES. 

Extends  the  implied  functionality  of  tap  and  traces  and  pen  registers  to  include  routing 
and  addressing  information.  This  would  imply  authorized  acquisition  of  interception  re- 
lated data  for  voice,  voice  over  IP,  and  general  IP  through  the  more  simplified  legal 
processes  of  tap  and  traces  and  pen  registers.  Internet-based  parameters  could  now  be 
formally  included  in  tap  and  trace  data,  including  IP  addresses,  MAC  layer  addresses 
(for  wireless  and  wired  Ethernet  interceptions),  ATM  addresses,  MPLS  labels,  etc.  [nS] 


Sec.  217:  INTERCEPTION  OF  COMPUTER  TRESPASSER  COMMUNICA- 
TIONS. 

This  section  enables  the  government  to  intercept  traffic  to/from  a computer  system  for  the 
purposes  of  electronic  surveillance  of  a suspect  believed  to  have  connected  to  the  system 
without  proper  authorization  (e.g.,  when  suspect  hacks  into  a computer).  Clearly,  LI 
techniques  for  IP  interception  are  called  for  here.  [S] 


Sec.  218:  FOREIGN  INTELLIGENCE  INFORMATION. 

The  wording  of  this  section  provides  more  generality  in  the  use  of  electronic  surveillance. 
Under  the  earlier  FISA  rulings,  foreign  intelligence  probes  were  the  “primary  purpose” 
behind  FISA-based  electronic  surveillance.  This  section  expands  the  use  of  electronic 
surveillance  by  regarding  foreign  intelligence  as  “a  significant  purpose”  behind  the  probe. 
From  an  LI  perspective,  this  section  can  be  viewed  as  helping  the  coordination  of  crimi- 
nal and  intelligence  investigations  to  which  systematic  LI  operations  and  information 
transmittal  shared  among  investigating  entities  will  be  needed.  [S] 
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Sec.  220:  NATIONWIDE  SERVICE  OF  SEARCH  WARRANTS  FOR  ELEC- 
TRONIC EVIDENCE. 

This  section  expands  the  geographic  jurisdiction  of  any  Federal  court  handling  electronic 
surveillance.  The  effect  is  that  a single  wiretap  warrant  can  now  yield  nationwide  cover- 
age, which  is  essential  for  the  capturing  of  Internet  messages  which  typically  traverse  na- 
tionwide networks.  Once  again,  a profound  impact  on  LI  can  be  anticipated  here,  where 
a single  interception  order  must  be  securely  transmitted  to  multiple  interception  opera- 
tion locations  within  and  across  communications  service  providers.  Likewise,  one  or 
more  monitoring  centers  would  have  to  be  equipped  to  handle  nationwide  interceptions. 
This  section  also  points  to  opportunities  for  third-party  lawful  interception  service  pro- 
viders who  could  coordinate  their  services  over  multiple  jurisdictions.  [S] 


Sec.  222:  ASSISTANCE  TO  LAW  ENFORCEMENT  AGENCIES. 

This  section  claims  communications  service  providers  and  other  parties  (e.g.,  landlords) 
assisting  law  enforcement  in  communications  interception  should  not  be  imposed  with 
additional  technical  obligations.  It  also  states  that  all  reasonable  costs  incurred  from  the 
surveillance  should  be  reimbursed  to  these  parties.  The  implications  for  LI  are  indirect 
here,  and  more  advanced  interception  capabilities  will  likely  be  called  for  - especially  in 
view  of  Sections  206  and  220.  [nS] 

Sec.  223:  CIVIL  LIABILITY  FOR  CERTAIN  UNAUTHORIZED  DISCLOSURES 

This  provision  enables  legal  action  against  the  US  Government  in  the  event  that  elec- 
tronic surveillance  data  were  willfully  and  maliciously  disclosed  by  an  agent  or  depart- 
ment of  the  US.  Special  measures  must  be  undertaken  to  assure  the  confidentiality  of 
information  obtained  from  lawful  interception,  and  to  prevent  “leakage  ” of  non-targeted 
information  into  surveillance  processes.  [S] 


Sec.  225:  IMMUNITY  FOR  COMPLIANCE  WITH  FISA  WIRETAP. 

This  amends  FISA  to  provide  immunity  of  communications  service  providers,  landlords, 
and  other  parties  when  assisting  the  government  in  the  collection  of  electronic  surveil- 
lance data.  [S] 

Sec  505:  MISCELLANEOUS  NATIONAL  SECURITY  AUTHORITIES  / PROCE- 
DURAL PROTECTIONS  FOR  NATIONAL  SECURITY  LETTERS. 

Recent  proposed  amendments  enable  a communications  service  provider  to  attempt  to 
modify  or  set  aside  a request  for  electronic  surveillance  by  seeking  a court  order  from  a 
US  district  court.  This  request  of  the  court  can  only  occur  if  the  service  provider  believes 
the  surveillance  request  is  unreasonable,  oppressive,  or  violates  constitutional  and  legal 
rights  of  the  provider.  The  amendment  also  enables  a service  provider  to  seek,  through  a 
US  district  court,  modifications  to  FISA’s  otherwise  stringent  nondisclosure  rules  con- 
cerning a specific  electronic  surveillance.  [nS] 
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Additional  Reauthorization  Amendments 


The  USA  PATRIOT  Act  Additional  Reauthorizing  Amendments  Act  of 2006  (S.2271), 
though  not  necessarily  related  uniquely  to  wiretapping,  provides  further  qualification  to 
FISA-related  procedures,  In  short,  persons  receiving  an  order  under  FISA  (such  as  via  a 
“national  security  letter”: 

• may  file  a motion  to  contest  the  order  in  a designated  court  of  law; 

• may  file  a motion  to  contest  the  nondisclosure  requirements  of  the  order,  begin- 
ning one  year  from  the  time  the  order  was  put  into  effect,  in  a designated  court  of 
law; 

• is  not  obligated  to  disclose  the  name  of  the  attorney  or  legal  counsel  firm  who  is 
assisting  the  person  under  investigation. 

This  act  provides  clarification  on  the  status  of  libraries  in  a federal  investigation.  In 
short,  it  reverses  the  ability  for  agents  to  serve,  under  the  earlier  US  Patriot  Act,  national 
security  letters  that  order  the  release  of  information  pertaining  to  library  patrons.  The 
amendment  now  states  that  under  US  code  Title  18  Sec.  2709,  libraries  should  not  be 
treated  as  a wire  or  electronic  communication  service  provider  (for  most  purposes)  and 
therefore  are  not  subject  to  surveillance  under  the  lawful  interception  laws  that  pertain  to 
communication  services  providers.  In  this  context,  “libraries”  are  the  services  of  which 
include  access  to  the  Internet,  books,  journals,  magazines,  newspapers,  or  other  similar 
forms  of  communication  in  print  or  digitally  by  patrons  for  their  use,  review,  examina- 
tion, or  circulation.  This  amendment  to  the  US  Patriot  Act  is  believed  to  make  an  inves- 
tigator’s acquisition  of  library  records  a more  rigorous  process,  with  more  governmental 
checks  and  balances. 
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For  Further  Reading: 

USA  PATRIOT  Act,  Public  Law  107-56,  26  October  2001  (H.R.  3162) 

USA  PATRIOT  Improvement  and  Re  authorization  Act  of 2005 , H.R.  3199,  3 January 
2006. 

USA  PATRIOT  Act  Additional  Reauthorizing  Amendments  Act  of 2006,  S.2271,  3 January 
2006. 

US  Code  18  (Federal  Crime  and  Rules  of  Criminal  Procedure);  Part  I,  Chapter  121,  Sec- 
tion 2709:  Counterintelligence  access  to  telephone  toll  and  transactional  records. 

US  Code  50,  Chapter  36  (Foreign  Intelligence  Surveillance),  Subchapters  I (Electronic 
Surveillance)  and  III  (Pen  Registers  and  Trap  and  Trace  Devices  for  Foreign  Intelligence 
Purposes). 

Senate  version  of  amendments  to  the  USA  Patriot  Act,  S.  1389  (13  July  2005) 
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